I have created one trend line panel.
Below is the query for the same:
index="abc*" OR index="xyz*" | eval raw_len=len(_raw) | eval MB=raw_len/pow(1024,2) | timechart sum(MB) as total_MB by sourcetype
In my chart I am able to see some bubbles.
I don't want then. I want line.
I have attached the screenshot.
Can someone guide me on that.